@aitne/daemon 0.1.7 → 0.1.9

package/dist/services/voice/transcriber-impl.js

@@ -39,10 +39,9 @@ function resolveDtype(model) {
  * time a voice message arrives. See `transcriber.ts` for the test seam.
  */
 export const defaultLoadPipeline = async ({ model, modelDir, onProgress, }) => {
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
     let mod;
     try {
-        mod = await import("@huggingface/transformers");
+        mod = (await import("@huggingface/transformers"));
     }
     catch (err) {
         throw new Error(`@huggingface/transformers not installed: ${err.message}`);
@@ -62,7 +61,6 @@ export const defaultLoadPipeline = async ({ model, modelDir, onProgress, }) => {
         mod.env.cacheDir = modelDir;
         mod.env.localModelPath = modelDir;
     }
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
     const pipelineOptions = {};
     // `onnx-community/whisper-large-v3-turbo`'s default fp32 encoder is a tiny
     // 439 KB stub that references a 2.55 GB sibling `.onnx_data` external-data
@@ -75,35 +73,36 @@ export const defaultLoadPipeline = async ({ model, modelDir, onProgress, }) => {
     // straight through to transformers.js).
     const dtype = resolveDtype(model);
     if (dtype !== undefined) {
+        // Operator may pin to a dtype not yet enumerated in the upstream union
+        // (e.g. a new quantization variant). Pass the string through and let
+        // transformers.js validate at runtime instead of erroring at compile.
         pipelineOptions.dtype = dtype;
     }
     if (onProgress) {
-        // eslint-disable-next-line @typescript-eslint/no-explicit-any
-        pipelineOptions.progress_callback = (event) => {
+        pipelineOptions.progress_callback = ((event) => {
             try {
                 onProgress(event);
             }
             catch {
                 // Never let a UI-progress observer break the actual download.
             }
-        };
+        });
     }
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
     const transcriber = await mod.pipeline("automatic-speech-recognition", model, pipelineOptions);
     return async (samples, options) => {
-        // eslint-disable-next-line @typescript-eslint/no-explicit-any
-        const result = await transcriber(samples, {
+        const result = (await transcriber(samples, {
             language: options.language ?? undefined,
             task: options.task,
             return_timestamps: false,
             chunk_length_s: 30,
             stride_length_s: 5,
-        });
+        }));
         const text = typeof result?.text === "string"
             ? result.text
             : Array.isArray(result?.chunks)
-                // eslint-disable-next-line @typescript-eslint/no-explicit-any
-                ? result.chunks.map((c) => c.text ?? "").join(" ")
+                ? result.chunks
+                    .map((c) => (typeof c.text === "string" ? c.text : ""))
+                    .join(" ")
                 : "";
         const language = typeof result?.language === "string" ? result.language : null;
         return { text, language };
@@ -116,19 +115,22 @@ export const defaultLoadPipeline = async ({ model, modelDir, onProgress, }) => {
  * carries the samples directly.
  */
 export const decodeAudioWithFfmpeg = async ({ path }) => {
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
     let ffmpegPathMod;
     try {
-        ffmpegPathMod = await import("ffmpeg-static");
+        ffmpegPathMod = (await import("ffmpeg-static"));
     }
     catch (err) {
         throw new Error(`ffmpeg-static not installed: ${err.message}`);
     }
-    const ffmpegPath = typeof ffmpegPathMod?.default === "string"
-        ? ffmpegPathMod.default
-        : typeof ffmpegPathMod === "string"
-            ? ffmpegPathMod
-            : "";
+    let ffmpegPath = "";
+    if (typeof ffmpegPathMod === "string") {
+        ffmpegPath = ffmpegPathMod;
+    }
+    else if (ffmpegPathMod) {
+        const def = ffmpegPathMod.default;
+        if (typeof def === "string")
+            ffmpegPath = def;
+    }
     if (!ffmpegPath) {
         throw new Error("ffmpeg-static: binary path not resolved");
     }
@@ -172,4 +174,3 @@ export const decodeAudioWithFfmpeg = async ({ path }) => {
         });
     });
 };
-//# sourceMappingURL=transcriber-impl.js.map

package/dist/services/voice/transcriber.d.ts

@@ -122,7 +122,6 @@ export interface VoiceTranscriptionResult {
  *
  * Inference strategy (per-attachment):
  *  - **Forced language set** (env override): single pass with `language=forced`.
- *    Same code path that has shipped with the feature.
  *  - **Otherwise (the default)**: pass 1 with auto-detect. If the output
  *    matches a known Whisper placeholder hallucination AND a primary
  *    language is configured, pass 2 retries with `language=primary`.
@@ -163,5 +162,26 @@ export declare class VoiceTranscriber {
     private runQueued;
     private transcribeUncached;
     private ensurePipeline;
+    /**
+     * Pre-load the Whisper pipeline so the first inbound voice DM does
+     * not pay the 800 MB – 2.5 GB model-download cost on the request path.
+     *
+     * Wiring contract:
+     *   - The daemon bootstrap (`bootstrap/event-pipeline.ts`) kicks this
+     *     off with `void warmUp()` immediately after constructing the
+     *     transcriber. Background, not awaited — startup must not block
+     *     on Hugging Face Hub being reachable.
+     *   - When voice transcription is disabled the call is a cheap no-op
+     *     (no setup, no download).
+     *   - The timeout bounds **how long we wait**, not the download
+     *     itself: `loadPipeline` runs inside `ensurePipeline` which caches
+     *     the promise. If we time out, the underlying load keeps running
+     *     and the first real `transcribe(...)` call simply awaits the
+     *     same cached promise. This avoids the "warm-up fails on a slow
+     *     network, agent permanently boots without voice" failure mode.
+     *   - On a true load failure (model invalid, transformers.js missing),
+     *     `ensurePipeline`'s catch nulls `pipelinePromise` so the next DM
+     *     retries from scratch — same behaviour as before warm-up.
+     */
+    warmUp(timeoutMs?: number): Promise<void>;
 }
-//# sourceMappingURL=transcriber.d.ts.map

package/dist/services/voice/transcriber.js

@@ -33,8 +33,7 @@ const TARGET_SAMPLE_RATE = 16000;
  * step failed and the model fell back to its English-decoder placeholder
  * vocabulary. This is the trigger for the primary-language fallback pass.
  *
- * Patterns observed in production (see DB-cached transcripts before this
- * helper landed):
+ * Patterns to detect (model meta-tokens emitted when language ID fails):
  *   - "(speaking in foreign language)"
  *   - "(speaking foreign language)"
  *   - "(silence)" / "(silent)" / "[silence]"
@@ -50,16 +49,22 @@ const PLACEHOLDER_PHRASE_REGEX =
 // Whole string is a single bracketed/parenthesized phrase whose content
 // matches a known meta-token vocabulary. We anchor with ^...$ so partial
 // matches inside a longer transcript do not trigger the retry.
-/^\s*[([](?:\s*[a-z]{1,3}\s*\|\s*)?\s*(?:speaking(?:\s+in)?\s+(?:a\s+)?foreign\s+language|non[-\s]?english\s+speech|in\s+foreign\s+language|silence|silent|music|applause|laughter|inaudible|background\s+noise|静寂|無音|♪+|\.{3,}|\s*)\s*[)\]]\s*$/i;
+// English-only vocabulary as of the 2026-05-27 revision; the
+// brace-only fallback pattern below catches non-English placeholder
+// shapes (e.g. `[♪♪♪]`, `(***)`, bracketed CJK silence tokens) via
+// its script-agnostic `\P{L}*` content check.
+/^\s*[([](?:\s*[a-z]{1,3}\s*\|\s*)?\s*(?:speaking(?:\s+in)?\s+(?:a\s+)?foreign\s+language|non[-\s]?english\s+speech|in\s+foreign\s+language|silence|silent|music|applause|laughter|inaudible|background\s+noise|♪+|\.{3,}|\s*)\s*[)\]]\s*$/i;
 // Bracketed/parenthesized fallback for meta-tokens we did not enumerate
 // above (e.g. `(***)`, `[♪♪♪]`, `(...)`). Uses Unicode property escapes so
 // the "no word characters" check is script-agnostic — the previous
-// hard-coded whitelist (`A-Za-zĀ-ſ぀-ヿ一-鿿Ѐ-ӿ֐-׿؀-ۿऀ-ॿ`) wrongly
-// flagged short bracketed transcripts in scripts it omitted (Korean,
-// Thai, Greek, Tamil, etc.) as placeholders, causing the cache to be
-// skipped and the message to fall back to a path-only file reference.
-// Trimming has already happened by the time we test, so the bracket
-// characters can be matched directly without an additional `\s` slot.
+// hard-coded whitelist (Latin + Latin-Extended-A + Hiragana/Katakana +
+// CJK Unified Ideographs + Cyrillic + Hebrew + Arabic + Devanagari)
+// wrongly flagged short bracketed transcripts in scripts it omitted
+// (Korean, Thai, Greek, Tamil, etc.) as placeholders, causing the cache
+// to be skipped and the message to fall back to a path-only file
+// reference. Trimming has already happened by the time we test, so the
+// bracket characters can be matched directly without an additional `\s`
+// slot.
 const BRACKETED_NON_LETTER_REGEX = /^[([][^\p{L}\p{N}]*[)\]]$/u;
 export function isWhisperPlaceholderOutput(text) {
     const trimmed = text.trim();
@@ -86,7 +91,6 @@ export function isWhisperPlaceholderOutput(text) {
  *
  * Inference strategy (per-attachment):
  *  - **Forced language set** (env override): single pass with `language=forced`.
- *    Same code path that has shipped with the feature.
  *  - **Otherwise (the default)**: pass 1 with auto-detect. If the output
  *    matches a known Whisper placeholder hallucination AND a primary
  *    language is configured, pass 2 retries with `language=primary`.
@@ -325,5 +329,58 @@ export class VoiceTranscriber {
         });
         return this.pipelinePromise;
     }
+    /**
+     * Pre-load the Whisper pipeline so the first inbound voice DM does
+     * not pay the 800 MB – 2.5 GB model-download cost on the request path.
+     *
+     * Wiring contract:
+     *   - The daemon bootstrap (`bootstrap/event-pipeline.ts`) kicks this
+     *     off with `void warmUp()` immediately after constructing the
+     *     transcriber. Background, not awaited — startup must not block
+     *     on Hugging Face Hub being reachable.
+     *   - When voice transcription is disabled the call is a cheap no-op
+     *     (no setup, no download).
+     *   - The timeout bounds **how long we wait**, not the download
+     *     itself: `loadPipeline` runs inside `ensurePipeline` which caches
+     *     the promise. If we time out, the underlying load keeps running
+     *     and the first real `transcribe(...)` call simply awaits the
+     *     same cached promise. This avoids the "warm-up fails on a slow
+     *     network, agent permanently boots without voice" failure mode.
+     *   - On a true load failure (model invalid, transformers.js missing),
+     *     `ensurePipeline`'s catch nulls `pipelinePromise` so the next DM
+     *     retries from scratch — same behaviour as before warm-up.
+     */
+    async warmUp(timeoutMs = 120_000) {
+        if (!this.isEnabled()) {
+            logger.debug("voice transcriber disabled, skipping warm-up");
+            return;
+        }
+        this.ensureSetup();
+        const startedAt = Date.now();
+        logger.info({ model: this.model, modelDir: this.modelDir, timeoutMs }, "voice transcriber: warming up pipeline");
+        // Race the load against a timeout. The timer's `.unref()` keeps it
+        // from preventing daemon shutdown; the bare race promise rejecting
+        // does not cancel the underlying load (transformers.js downloads
+        // are not abortable), which is the intended behaviour described in
+        // the JSDoc above.
+        let timeoutHandle = null;
+        const timeoutPromise = new Promise((_, reject) => {
+            timeoutHandle = setTimeout(() => reject(new Error(`voice transcriber warm-up timed out after ${timeoutMs}ms`)), timeoutMs);
+            if (timeoutHandle !== null
+                && typeof timeoutHandle.unref === "function") {
+                timeoutHandle.unref();
+            }
+        });
+        try {
+            await Promise.race([this.ensurePipeline(), timeoutPromise]);
+            logger.info({ elapsedMs: Date.now() - startedAt, model: this.model }, "voice transcriber: pipeline ready");
+        }
+        catch (err) {
+            logger.warn({ err, elapsedMs: Date.now() - startedAt, model: this.model }, "voice transcriber: warm-up did not complete; first voice DM will trigger a fresh load");
+        }
+        finally {
+            if (timeoutHandle !== null)
+                clearTimeout(timeoutHandle);
+        }
+    }
 }
-//# sourceMappingURL=transcriber.js.map

package/dist/settings/runtime-settings.d.ts

@@ -13,7 +13,7 @@ import { z } from "zod";
  * contract — `chmod`, `chown`, destructive `git` flags. Allow mode skips
  * these per design, Safe mode keeps them.
  */
-export declare const DEFAULT_DISALLOWED_TOOLS: readonly ["Bash(rm -rf *)", "Bash(rm -rf /*)", "Bash(rm -rf ~*)", "Bash(rm -rf .*)", "Bash(rm -r *)", "Bash(rm -rf*)", "Bash(rm -rv*)", "Bash(rm -ri*)", "Bash(rm -rd*)", "Bash(rm -rI*)", "Bash(rm -fr*)", "Bash(rm -vr*)", "Bash(rm -ir*)", "Bash(rm -dr*)", "Bash(rm -Ir*)", "Bash(rm -R*)", "Bash(rm -fR*)", "Bash(rm -vR*)", "Bash(rm -iR*)", "Bash(rm -dR*)", "Bash(rm -IR*)", "Bash(rm --recursive*)", "Bash(rm --force --recursive*)", "Bash(rm --recursive --force*)", "Bash(sudo *)", "Bash(doas *)", "Bash(su *)", "Bash(curl * | sh*)", "Bash(curl * | bash*)", "Bash(wget * | sh*)", "Bash(wget * | bash*)", "Bash(bash <(*)*)", "Bash(sh <(*)*)", "Bash(bash<*)", "Bash(sh<*)", "Bash(eval *)", "Bash(source *)", "Bash(security *)", "Bash(secret-tool *)", "Bash(cmdkey *)", "Read(.env)", "Read(.env.*)", "Read(**/.env)", "Read(**/.env.*)", "Read(id_rsa*)", "Read(id_ed25519*)", "Read(~/.ssh/**)", "Read(~/.gnupg/**)", "Read(~/.aws/**)", "Read(~/.config/gcloud/**)", "Read(~/.config/gh/hosts.yml)", "Read(~/.netrc)", "Read(~/Library/Keychains/**)", "Read(~/.local/share/keyrings/**)", "Read(~/.personal-agent/backups/**)", "Read(~/.personal-agent/whatsapp/auth/**)", "Read(~/.personal-agent/secrets/**)", "Write(.env)", "Edit(.env)", "Write(.env.*)", "Edit(.env.*)", "Write(**/.env)", "Edit(**/.env)", "Write(**/.env.*)", "Edit(**/.env.*)", "Write(id_rsa*)", "Edit(id_rsa*)", "Write(id_ed25519*)", "Edit(id_ed25519*)", "Write(~/.ssh/**)", "Edit(~/.ssh/**)", "Write(~/.gnupg/**)", "Edit(~/.gnupg/**)", "Write(~/.aws/**)", "Edit(~/.aws/**)", "Write(~/.config/gcloud/**)", "Edit(~/.config/gcloud/**)", "Write(~/.config/gh/hosts.yml)", "Edit(~/.config/gh/hosts.yml)", "Write(~/.netrc)", "Edit(~/.netrc)", "Write(~/Library/Keychains/**)", "Edit(~/Library/Keychains/**)", "Write(~/.local/share/keyrings/**)", "Edit(~/.local/share/keyrings/**)", "Write(~/.personal-agent/backups/**)", "Edit(~/.personal-agent/backups/**)", "Write(~/.personal-agent/whatsapp/auth/**)", "Edit(~/.personal-agent/whatsapp/auth/**)", "Write(~/.personal-agent/secrets/**)", "Edit(~/.personal-agent/secrets/**)", "CronCreate", "CronList", "CronDelete", "RemoteTrigger", "PushNotification", "Bash(chmod *)", "Bash(chown *)", "Bash(git push --force *)", "Bash(git push -f *)", "Bash(git reset --hard *)", "Bash(git clean *)"];
+export declare const DEFAULT_DISALLOWED_TOOLS: readonly ["Bash(rm -rf *)", "Bash(rm -rf /*)", "Bash(rm -rf ~*)", "Bash(rm -rf .*)", "Bash(rm -r *)", "Bash(rm -rf*)", "Bash(rm -rv*)", "Bash(rm -ri*)", "Bash(rm -rd*)", "Bash(rm -rI*)", "Bash(rm -fr*)", "Bash(rm -vr*)", "Bash(rm -ir*)", "Bash(rm -dr*)", "Bash(rm -Ir*)", "Bash(rm -R*)", "Bash(rm -fR*)", "Bash(rm -vR*)", "Bash(rm -iR*)", "Bash(rm -dR*)", "Bash(rm -IR*)", "Bash(rm --recursive*)", "Bash(rm --force --recursive*)", "Bash(rm --recursive --force*)", "Bash(sudo *)", "Bash(doas *)", "Bash(su *)", "Bash(curl * | sh*)", "Bash(curl * | bash*)", "Bash(wget * | sh*)", "Bash(wget * | bash*)", "Bash(bash <(*)*)", "Bash(sh <(*)*)", "Bash(bash<*)", "Bash(sh<*)", "Bash(eval *)", "Bash(source *)", "Bash(security *)", "Bash(secret-tool *)", "Bash(cmdkey *)", "Bash(certutil *)", "Bash(rundll32.exe *)", "Read(.env)", "Read(.env.*)", "Read(**/.env)", "Read(**/.env.*)", "Read(id_rsa*)", "Read(id_ed25519*)", "Read(~/.ssh/**)", "Read(~/.gnupg/**)", "Read(~/.aws/**)", "Read(~/.config/gcloud/**)", "Read(~/.config/gh/hosts.yml)", "Read(~/.netrc)", "Read(~/Library/Keychains/**)", "Read(~/.local/share/keyrings/**)", "Read(~/.personal-agent/backups/**)", "Read(~/.personal-agent/whatsapp/auth/**)", "Read(~/.personal-agent/secrets/**)", "Write(.env)", "Edit(.env)", "Write(.env.*)", "Edit(.env.*)", "Write(**/.env)", "Edit(**/.env)", "Write(**/.env.*)", "Edit(**/.env.*)", "Write(id_rsa*)", "Edit(id_rsa*)", "Write(id_ed25519*)", "Edit(id_ed25519*)", "Write(~/.ssh/**)", "Edit(~/.ssh/**)", "Write(~/.gnupg/**)", "Edit(~/.gnupg/**)", "Write(~/.aws/**)", "Edit(~/.aws/**)", "Write(~/.config/gcloud/**)", "Edit(~/.config/gcloud/**)", "Write(~/.config/gh/hosts.yml)", "Edit(~/.config/gh/hosts.yml)", "Write(~/.netrc)", "Edit(~/.netrc)", "Write(~/Library/Keychains/**)", "Edit(~/Library/Keychains/**)", "Write(~/.local/share/keyrings/**)", "Edit(~/.local/share/keyrings/**)", "Write(~/.personal-agent/backups/**)", "Edit(~/.personal-agent/backups/**)", "Write(~/.personal-agent/whatsapp/auth/**)", "Edit(~/.personal-agent/whatsapp/auth/**)", "Write(~/.personal-agent/secrets/**)", "Edit(~/.personal-agent/secrets/**)", "Bash(sqlite3 *)", "Bash(cp ~/Library/Application Support/Google/Chrome/*)", "Bash(cp ~/Library/Application Support/Chromium/*)", "Bash(cp ~/Library/Application Support/Microsoft Edge/*)", "Bash(cp ~/Library/Application Support/BraveSoftware/*)", "Bash(cp ~/Library/Application Support/Comet/*)", "Bash(cp ~/Library/Application Support/Perplexity Comet/*)", "Bash(cp ~/Library/Application Support/com.openai.atlas/*)", "Bash(cp ~/.config/google-chrome/*)", "Bash(cp ~/.config/chromium/*)", "Bash(cp ~/.config/microsoft-edge/*)", "Bash(cp ~/.config/BraveSoftware/*)", "Bash(cp ~/.config/Comet/*)", "Bash(cp ~/.var/app/com.google.Chrome/*)", "Bash(cp /mnt/c/Users/*)", "Bash(curl file://*)", "Read(~/Library/Application Support/Google/Chrome/**)", "Read(~/Library/Application Support/Chromium/**)", "Read(~/Library/Application Support/Microsoft Edge/**)", "Read(~/Library/Application Support/BraveSoftware/**)", "Read(~/Library/Application Support/Comet/**)", "Read(~/Library/Application Support/Perplexity Comet/**)", "Read(~/Library/Application Support/com.openai.atlas/**)", "Read(~/.config/google-chrome/**)", "Read(~/.config/chromium/**)", "Read(~/.config/microsoft-edge/**)", "Read(~/.config/BraveSoftware/**)", "Read(~/.config/Comet/**)", "Read(~/.var/app/com.google.Chrome/**)", "Read(/mnt/c/Users/**)", "Write(~/Library/Application Support/Google/Chrome/**)", "Edit(~/Library/Application Support/Google/Chrome/**)", "Write(~/Library/Application Support/Chromium/**)", "Edit(~/Library/Application Support/Chromium/**)", "Write(~/Library/Application Support/Microsoft Edge/**)", "Edit(~/Library/Application Support/Microsoft Edge/**)", "Write(~/Library/Application Support/BraveSoftware/**)", "Edit(~/Library/Application Support/BraveSoftware/**)", "Write(~/Library/Application Support/Comet/**)", "Edit(~/Library/Application Support/Comet/**)", "Write(~/Library/Application Support/Perplexity Comet/**)", "Edit(~/Library/Application Support/Perplexity Comet/**)", "Write(~/Library/Application Support/com.openai.atlas/**)", "Edit(~/Library/Application Support/com.openai.atlas/**)", "Write(~/.config/google-chrome/**)", "Edit(~/.config/google-chrome/**)", "Write(~/.config/chromium/**)", "Edit(~/.config/chromium/**)", "Write(~/.config/microsoft-edge/**)", "Edit(~/.config/microsoft-edge/**)", "Write(~/.config/BraveSoftware/**)", "Edit(~/.config/BraveSoftware/**)", "Write(~/.config/Comet/**)", "Edit(~/.config/Comet/**)", "Write(~/.var/app/com.google.Chrome/**)", "Edit(~/.var/app/com.google.Chrome/**)", "Write(/mnt/c/Users/**)", "Edit(/mnt/c/Users/**)", "Bash(cp ~/.personal-agent/chromium-*)", "Bash(mv ~/.personal-agent/chromium-*)", "Bash(tar ~/.personal-agent/chromium-*)", "Bash(zip ~/.personal-agent/chromium-*)", "Bash(rsync ~/.personal-agent/chromium-*)", "Bash(cp $HOME/.personal-agent/chromium-*)", "Bash(mv $HOME/.personal-agent/chromium-*)", "Bash(tar $HOME/.personal-agent/chromium-*)", "Bash(zip $HOME/.personal-agent/chromium-*)", "Bash(rsync $HOME/.personal-agent/chromium-*)", "Read(~/.personal-agent/chromium-sync/**)", "Read(~/.personal-agent/chromium-automation/**)", "Read(~/.personal-agent/chromium-automation-anon/**)", "Read(~/.personal-agent/chromium-automation-auth/**)", "Read(~/.personal-agent/chromium-automation-purchase/**)", "Write(~/.personal-agent/chromium-sync/**)", "Edit(~/.personal-agent/chromium-sync/**)", "Write(~/.personal-agent/chromium-automation/**)", "Edit(~/.personal-agent/chromium-automation/**)", "Write(~/.personal-agent/chromium-automation-anon/**)", "Edit(~/.personal-agent/chromium-automation-anon/**)", "Write(~/.personal-agent/chromium-automation-auth/**)", "Edit(~/.personal-agent/chromium-automation-auth/**)", "Write(~/.personal-agent/chromium-automation-purchase/**)", "Edit(~/.personal-agent/chromium-automation-purchase/**)", "CronCreate", "CronList", "CronDelete", "RemoteTrigger", "PushNotification", "Bash(chmod *)", "Bash(chown *)", "Bash(git push --force *)", "Bash(git push -f *)", "Bash(git reset --hard *)", "Bash(git clean *)"];
 /**
  * Shape of a "watched git repository" — projected from the unified
  * `repositories` table by `selectGitWatchedRepos` for legacy consumers
@@ -141,19 +141,20 @@ export declare const runtimeSettingsSchema: z.ZodObject<{
     character: z.ZodDefault<z.ZodString>;
     timezone: z.ZodDefault<z.ZodString>;
     dayBoundaryHour: z.ZodDefault<z.ZodNumber>;
+    monthlyReviewEnabled: z.ZodDefault<z.ZodBoolean>;
+    browserTaskMaxConcurrent: z.ZodDefault<z.ZodNumber>;
+    browserTaskPendingQueueTimeoutMinutes: z.ZodDefault<z.ZodNumber>;
+    browserTaskRespectQuietHours: z.ZodDefault<z.ZodBoolean>;
+    browserTaskHostnameDenylist: z.ZodDefault<z.ZodArray<z.ZodString>>;
     hourlyCheckEnabled: z.ZodDefault<z.ZodBoolean>;
     hourlyCheckIntervalMinutes: z.ZodDefault<z.ZodNumber>;
     hourlyCheckActiveStartHour: z.ZodDefault<z.ZodNumber>;
     hourlyCheckActiveEndHour: z.ZodDefault<z.ZodNumber>;
     hourlyCheckMinObservations: z.ZodDefault<z.ZodNumber>;
-    hourlyCheckGateMode: z.ZodDefault<z.ZodEnum<{
-        off: "off";
-        shadow: "shadow";
-        live: "live";
-    }>>;
     hourlyCheckStage2Enabled: z.ZodDefault<z.ZodBoolean>;
     hourlyCheckHeartbeatHours: z.ZodDefault<z.ZodNumber>;
     hourlyCheckLowSignalPendingCeiling: z.ZodDefault<z.ZodNumber>;
+    hourlyCheckPrePassFreshnessMinutes: z.ZodDefault<z.ZodNumber>;
     authProbeDisabled: z.ZodDefault<z.ZodBoolean>;
     authPreflightFreshnessMs: z.ZodDefault<z.ZodNumber>;
     schedulePollIntervalSeconds: z.ZodDefault<z.ZodNumber>;
@@ -179,6 +180,12 @@ export declare const runtimeSettingsSchema: z.ZodObject<{
         strict: "strict";
         allow: "allow";
     }>>;
+    opencodeExecutionPermissionMode: z.ZodDefault<z.ZodEnum<{
+        strict: "strict";
+        allow: "allow";
+    }>>;
+    opencodeBaseUrl: z.ZodDefault<z.ZodString>;
+    opencodeServerUsername: z.ZodDefault<z.ZodString>;
     obsidianDebounceSeconds: z.ZodDefault<z.ZodNumber>;
     gitPollIntervalSeconds: z.ZodDefault<z.ZodNumber>;
     gitPushOverdueMinutes: z.ZodDefault<z.ZodNumber>;
@@ -187,6 +194,44 @@ export declare const runtimeSettingsSchema: z.ZodObject<{
     calendarPollIntervalSeconds: z.ZodDefault<z.ZodNumber>;
     gmailPollIntervalSeconds: z.ZodDefault<z.ZodNumber>;
     githubPollIntervalSeconds: z.ZodDefault<z.ZodNumber>;
+    browserHistoryConsentAccepted: z.ZodDefault<z.ZodBoolean>;
+    browserHistoryBrowserOverrides: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodEnum<{
+        auto: "auto";
+        "forced-on": "forced-on";
+        "forced-off": "forced-off";
+    }>>>;
+    browserHistoryCategories: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+        work: "work";
+        research: "research";
+        shopping: "shopping";
+        social: "social";
+        news: "news";
+        entertainment: "entertainment";
+        dev: "dev";
+        banking: "banking";
+        health: "health";
+        adult: "adult";
+        "cloud-console": "cloud-console";
+        localhost: "localhost";
+        "app-config": "app-config";
+        other: "other";
+    }>>>;
+    browserHistoryRetentionDays: z.ZodDefault<z.ZodNumber>;
+    browserHistorySearchQueryRetentionDays: z.ZodDefault<z.ZodNumber>;
+    browserHistoryLifecycle: z.ZodPrefault<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        check_interval_minutes: z.ZodDefault<z.ZodNumber>;
+        per_browser: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            profiles_to_track: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            sync_flush_wait_seconds: z.ZodDefault<z.ZodNumber>;
+            check_interval_minutes_override: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strip>>>;
+        respect_quiet_hours: z.ZodDefault<z.ZodBoolean>;
+        max_concurrent_launches: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip>>;
+    browserHistoryResearchDomainAllowlist: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    browserHistoryResearchDomainDenylist: z.ZodDefault<z.ZodArray<z.ZodString>>;
     mcpAutoProbeIntervalMinutes: z.ZodDefault<z.ZodNumber>;
     delegatedProbeIntervalMinutes: z.ZodDefault<z.ZodNumber>;
     enabledMailProviders: z.ZodDefault<z.ZodArray<z.ZodEnum<{
@@ -236,9 +281,8 @@ export declare const runtimeSettingsSchema: z.ZodObject<{
     voiceTranscriptionPrimaryLanguage: z.ZodDefault<z.ZodNullable<z.ZodString>>;
 }, z.core.$strip>;
 export type RuntimeSettings = z.infer<typeof runtimeSettingsSchema>;
-export declare const RUNTIME_SETTING_KEYS: readonly ["slackOwnerUserId", "telegramOwnerChatId", "discordOwnerUserId", "whatsappEnabled", "whatsappOwnerPhone", "whatsappAuthDir", "googleCalendarId", "notionDatabaseIds", "primaryVaultPath", "primaryVaultName", "externalObsidianVaultPath", "externalObsidianVaultName", "externalObsidianWatch", "gitAccounts", "advisorEnabled", "advisorModel", "enforceReadToken", "maxConcurrentSessions", "maxReactiveSessions", "delegatedProxyMaxConcurrent", "delegatedTaskModeEnabled", "delegatedTaskMaxPerDay", "delegatedTaskDefaultMaxToolCalls", "delegatedTaskDefaultMaxBudgetUsd", "delegatedTaskDefaultTimeoutMs", "delegatedTaskHeavyEnabled", "delegatedTaskStructuredOutputEnabled", "delegatedTaskSubprocessPoolEnabled", "delegatedTaskSubprocessPoolTtlSeconds", "delegatedTaskCacheEnabled", "delegatedTaskCacheTtlSeconds", "delegatedTaskCacheMaxEntries", "executeTimeoutMinutes", "sessionTimeoutDmMinutes", "sessionTimeoutChannelMinutes", "sessionTimeoutDashboardMinutes", "historyInjectionMaxMessages", "historyInjectionMaxTokens", "historyOtherSurfaceWindowMinutes", "dmStalenessStrict", "proactiveForwardChannelTimelineEnabled", "proactiveForwardForceFreshSession", "agentDisplayName", "character", "timezone", "dayBoundaryHour", "hourlyCheckEnabled", "hourlyCheckIntervalMinutes", "hourlyCheckActiveStartHour", "hourlyCheckActiveEndHour", "hourlyCheckMinObservations", "hourlyCheckGateMode", "hourlyCheckStage2Enabled", "hourlyCheckHeartbeatHours", "hourlyCheckLowSignalPendingCeiling", "authProbeDisabled", "authPreflightFreshnessMs", "schedulePollIntervalSeconds", "maxBriefingDelayMinutes", "maxNotificationsPerHour", "maxNotificationsPerDay", "quietHoursStart", "quietHoursEnd", "batchIntervalMinutes", "primaryPlatform", "defaultNotificationPlatforms", "disallowedTools", "allowedToolsOverride", "claudeExecutionPermissionMode", "codexExecutionPermissionMode", "geminiExecutionPermissionMode", "obsidianDebounceSeconds", "gitPollIntervalSeconds", "gitPushOverdueMinutes", "gitProjectUpdateDebounceMinutes", "notionPollIntervalSeconds", "calendarPollIntervalSeconds", "gmailPollIntervalSeconds", "githubPollIntervalSeconds", "mcpAutoProbeIntervalMinutes", "delegatedProbeIntervalMinutes", "enabledMailProviders", "mailPollIntervalSeconds", "mailIdleEnabled", "mailIdleInstabilityThreshold", "mailIdleFallbackRecoveryMinutes", "mailMaxMessagesPerPoll", "mailAuthFailureRetryHours", "hourlyObservationCharBudget", "prePassMaxAttemptsPerIntegration", "prePassBackoffMs", "prePassRetryEscalationTier", "prePassFanOutConcurrency", "prePassMaxBudgetUsdPerIntegration", "prePassMaxBudgetUsdPerRoutine", "prePassRetryOnPartial", "observationSummarizerEnabled", "observationSummarizerConcurrency", "observationSummarizerMaxCallsPerMinute", "observationSummarizerQueueLimit", "observationSummarizerTimeoutMs", "vipMailSenders", "outlookDeltaPageSize", "outlookGraphConcurrency", "imapReconnectBaseMs", "imapReconnectMaxMs", "autonomousDailyCostCapUsd", "autonomousMonthlyCostCapUsd", "primaryLanguage", "vaultMode", "useReviewDossiers", "useContextIndex", "voiceTranscriptionEnabled", "voiceTranscriptionPrimaryLanguage"];
+export declare const RUNTIME_SETTING_KEYS: readonly ["slackOwnerUserId", "telegramOwnerChatId", "discordOwnerUserId", "whatsappEnabled", "whatsappOwnerPhone", "whatsappAuthDir", "googleCalendarId", "notionDatabaseIds", "primaryVaultPath", "primaryVaultName", "externalObsidianVaultPath", "externalObsidianVaultName", "externalObsidianWatch", "gitAccounts", "advisorEnabled", "advisorModel", "enforceReadToken", "maxConcurrentSessions", "maxReactiveSessions", "delegatedProxyMaxConcurrent", "delegatedTaskModeEnabled", "delegatedTaskMaxPerDay", "delegatedTaskDefaultMaxToolCalls", "delegatedTaskDefaultMaxBudgetUsd", "delegatedTaskDefaultTimeoutMs", "delegatedTaskHeavyEnabled", "delegatedTaskStructuredOutputEnabled", "delegatedTaskSubprocessPoolEnabled", "delegatedTaskSubprocessPoolTtlSeconds", "delegatedTaskCacheEnabled", "delegatedTaskCacheTtlSeconds", "delegatedTaskCacheMaxEntries", "executeTimeoutMinutes", "sessionTimeoutDmMinutes", "sessionTimeoutChannelMinutes", "sessionTimeoutDashboardMinutes", "historyInjectionMaxMessages", "historyInjectionMaxTokens", "historyOtherSurfaceWindowMinutes", "dmStalenessStrict", "proactiveForwardChannelTimelineEnabled", "proactiveForwardForceFreshSession", "agentDisplayName", "character", "timezone", "dayBoundaryHour", "monthlyReviewEnabled", "browserTaskMaxConcurrent", "browserTaskPendingQueueTimeoutMinutes", "browserTaskRespectQuietHours", "browserTaskHostnameDenylist", "hourlyCheckEnabled", "hourlyCheckIntervalMinutes", "hourlyCheckActiveStartHour", "hourlyCheckActiveEndHour", "hourlyCheckMinObservations", "hourlyCheckStage2Enabled", "hourlyCheckHeartbeatHours", "hourlyCheckLowSignalPendingCeiling", "hourlyCheckPrePassFreshnessMinutes", "authProbeDisabled", "authPreflightFreshnessMs", "schedulePollIntervalSeconds", "maxBriefingDelayMinutes", "maxNotificationsPerHour", "maxNotificationsPerDay", "quietHoursStart", "quietHoursEnd", "batchIntervalMinutes", "primaryPlatform", "defaultNotificationPlatforms", "disallowedTools", "allowedToolsOverride", "claudeExecutionPermissionMode", "codexExecutionPermissionMode", "geminiExecutionPermissionMode", "opencodeExecutionPermissionMode", "opencodeBaseUrl", "opencodeServerUsername", "obsidianDebounceSeconds", "gitPollIntervalSeconds", "gitPushOverdueMinutes", "gitProjectUpdateDebounceMinutes", "notionPollIntervalSeconds", "calendarPollIntervalSeconds", "gmailPollIntervalSeconds", "githubPollIntervalSeconds", "browserHistoryConsentAccepted", "browserHistoryBrowserOverrides", "browserHistoryCategories", "browserHistoryRetentionDays", "browserHistorySearchQueryRetentionDays", "browserHistoryLifecycle", "browserHistoryResearchDomainAllowlist", "browserHistoryResearchDomainDenylist", "mcpAutoProbeIntervalMinutes", "delegatedProbeIntervalMinutes", "enabledMailProviders", "mailPollIntervalSeconds", "mailIdleEnabled", "mailIdleInstabilityThreshold", "mailIdleFallbackRecoveryMinutes", "mailMaxMessagesPerPoll", "mailAuthFailureRetryHours", "hourlyObservationCharBudget", "prePassMaxAttemptsPerIntegration", "prePassBackoffMs", "prePassRetryEscalationTier", "prePassFanOutConcurrency", "prePassMaxBudgetUsdPerIntegration", "prePassMaxBudgetUsdPerRoutine", "prePassRetryOnPartial", "observationSummarizerEnabled", "observationSummarizerConcurrency", "observationSummarizerMaxCallsPerMinute", "observationSummarizerQueueLimit", "observationSummarizerTimeoutMs", "vipMailSenders", "outlookDeltaPageSize", "outlookGraphConcurrency", "imapReconnectBaseMs", "imapReconnectMaxMs", "autonomousDailyCostCapUsd", "autonomousMonthlyCostCapUsd", "primaryLanguage", "vaultMode", "useReviewDossiers", "useContextIndex", "voiceTranscriptionEnabled", "voiceTranscriptionPrimaryLanguage"];
 export type RuntimeSettingKey = (typeof RUNTIME_SETTING_KEYS)[number];
 export declare const INTERNAL_RUNTIME_SETTING_KEYS: readonly ["enforceReadToken", "useReviewDossiers", "useContextIndex"];
 export type InternalRuntimeSettingKey = (typeof INTERNAL_RUNTIME_SETTING_KEYS)[number];
 export declare function isRuntimeSettingKey(value: string): value is RuntimeSettingKey;
-//# sourceMappingURL=runtime-settings.d.ts.map